HIPAA Related Links

The Health Insurance Portability and Accountability Act of 1996
Public Law 104-191

HIPAA Information and Web Links

The following pages may have information useful to organizations and agencies with HIPAA implementation responsibilities. Please note: Links and resources listed on this Web page are provided as a convenience to providers and the community; they are not endorsed by King County.

US Government Web Links | Washington State Government Links | Behavioral Health Organizations & Other Links | Print Resources

US Government Web links:

HIPAA RULES

General or more than one rule

• Complaint Information
   
  
• Department of Health and Human Services (HHS) Web Page - Administrative Simplification portion of HIPAA, notice of proposed rule making process, etc.
  
  
• Military Health System (Tricare Management) Web Homepage - Contains good links to summary information on the various rules and standards.
  
  
• National Provider Identifier Number (NPI) - The Final Rule adopting the HIPAA standard unique health identifier for health care providers was published in the Federal Register on January 23, 2004. Health care providers who are covered entities must obtain and use NPIs. All HIPAA covered entities must use NPIs by the compliance dates (May 23, 2007 for all but small health plans; May 23, 2008 for small health plans). Provides links on how to get a number, as well as other resources.

Privacy Rule

• HHS - Final Privacy rule with subsequent modifications. The final modifications of the "final rule" were issued on August 24, 2002.
  
  
• Refer to this Web page for an unofficial combined version of the final rule with modifications.
  
  
• OCR HIPAA Privacy Main Page: U.S. Department of Health and Human
  
  
• Office of Civil Rights (OCR) Guidance document and text of the privacy rule on December 4, 2002. There are 3 types of files to choose from -- PDF, Word Perfect or RTF.
  
  
• Privacy Act of 1974, as amended, provided by the U.S. Department of Justice.
  
  
• Proposed Privacy Rule and Final Privacy Rule: U.S. Department of Health and Human Services Web site containing more information on the rules and regulations that safeguard health information.

Enforcement Rule

• Enforcement Rule: On October 15, 2002 the Centers for Medicare and Medicaid Services (CMS) was named to enforce HIPAA Transaction and Code Set Standards. The HHS Office for Civil Rights continues to enforce Privacy Standards.

Washington State Government links:

• Washington State Department of Social and Health Services (DSHS) "Washington State's HIPAA Home Page"

Behavioral Health Organizations and other links:

General or more than one rule

• Davis Wright Tremaine - eHealth/HIPAA Home Page. Get up-to-date HIPAA news
  
  
• HIPAAdvisory by Phoenix Health Systems. Contains information on the privacy, security, transaction and provider IS rules.
  
  
• Massachusetts Health Data Consortium: Has a long list of relevant links for privacy, security, transaction, and identifier.
  
  
• National HIPAA Summit. Streaming video from the nine past summits, plus training links. Also meeting notice for the next summit.
  
  
• Southern HIPAA Administrative Regional Partnership (SHARP). Resources and links for the Transaction and Security Rules.
  
  
• Washington State CHITA Readiness Forum presents a series of half-day conferences at Swedish Hospital Glaser Auditorium. Aspects of the HIPAA law can also be found on this site.
  

Privacy

• Health Privacy Project, Institute for Healthcare Research and Policy, Georgetown University. Many links from here.
  
  
• Sample draft documents for HIPAA compliance from the North Carolina Healthcare Information and Communications Alliance. This is a very good source.
  

Transactions

• Designated Standards Maintenance Organizations are comprised of Data Content Committees (DCCs) and Standard Setting Organizations (SSOs). These organizations have agreed to maintain designated national standards relevant to the final "Standards for Electronic Transactions" rule according to the criteria established by the Secretary of Health and Human Services. This site links to some pdf files and an FAQs.
  
  
• Washington Publishing Company site contains all the implementation guides, data conditions and data dictionary for X12N standards proposed under HIPAA.
  
  
• Wisconsin COW HIPAA collaborative of Wisconsin. This group is a regional affiliate of WEDI and has lots of links.
  
  
• Workgroup for Electronic Data Interchange Web Site. The WEDI HIPAA SNIP Task Group has been established to meet the immediate need to assess industry-wide HIPAA Administrative Simplification implementation readiness and to bring about the national coordination necessary for successful compliance. This site includes information on EDI in the healthcare industry and information about HIPAA rules.
  

Print Resources

Electronic Transactions and Code Sets:

• Standards for Electronic Transactions and Code sets, Federal Rule Federal Register, February 20, 2003 (Volume 68, Number 34) Rules and regulations, pages 8381-8399. 45 CFR Parts 160 and 162.
  

Enforcement Rule:

• Enforcement Rule published in Federal Register Feb. 16, 2006
  
• Proposed Enforcement Rule published in Federal Register April 18, 2005

National Provider Identifier Rule:

• National Provider Identifier - Unique Health Identifier for Health Care Providers: Final Rule: Federal Register, January 23, 2004 (Volume 69, No 15) Rules and Regulations, pages 3434 - 3469.
  

Privacy Rule:

• Standards for Privacy of Individually Identifiable Health Information: Final Rule - Federal Register, August 24, 2002 (Volume 67, Number 157) Rules and Regulations, pages 53282 - 53273. (Note the actual rule is just the last section, pages 53264 through 53273). 45 CFR parts 160 and 164.
  

Security Rule:

• Health Insurance Reform: Security Standards. Final Rule - Federal Register, February 20, 2003 (Volume 68, No. 34) Rules Regulations, pages 8334-8380.
  

For more information about the King County Mental Health, Chemical Abuse and Dependency Services Division's HIPAA Program, please contact René Franzen, Privacy Officer.